CVE-2014-2366

upAdminPg.asp in Advantech WebAccess before 7.2 allows remote authenticated users to discover credentials by reading HTML source code.

Score

CVSS 2.0 9.0 Critical

Status

Modified - ics-cert@hq.dhs.gov

Published

2014-07-19

Last modified

2025-10-06

Weaknesses

CWE-200, CWE-316

Affected products

• Advantech Webaccess (Advantech)
• Webaccess (Advantech)

References

• http://webaccess.advantech.com/
• https://www.cisa.gov/news-events/ics-advisories/icsa-14-198-02
• http://ics-cert.us-cert.gov/advisories/ICSA-14-198-02